$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft File: 69D341364BC344B4ED6B3A65031AACB403AB3222.mft (raw, json) Hash identifier: NnEJvawHd4uHC9vF8fSCjv9XZK5448qru0lyegLTqyQ= Subject key identifier: 29:75:76:E4:02:76:C3:A0:C2:5E:FD:B8:B7:2B:1A:8D:06:3A:4C:3B Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 Certificate issuer: /CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Certificate serial: 54E56A3ADA38F926987069C8AC39F0B8CCC9BE7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft Manifest number: 0519 Signing time: Sat 18 Oct 2025 15:11:21 +0000 Manifest this update: Sat 18 Oct 2025 15:06:21 +0000 Manifest next update: Tue 21 Oct 2025 20:19:21 +0000 Files and hashes: 1: 69D341364BC344B4ED6B3A65031AACB403AB3222.crl (hash: 7t29zLJRPgE0bHCAvU7FznrD52c3NelC9JUMOOjAonQ=) 2: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: mEwVbYgiqYJGIGp+5J9MnWrl5gm8ToUUdLv1IaAGjLQ=) 3: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: /62nOK71rLN/rA80+Xk3S/HgS8HMB1l9OOKuRpOZFP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e5:6a:3a:da:38:f9:26:98:70:69:c8:ac:39:f0:b8:cc:c9:be:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Validity Not Before: Oct 18 15:06:21 2025 GMT Not After : Oct 21 20:19:21 2025 GMT Subject: CN=297576E40276C3A0C25EFDB8B72B1A8D063A4C3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cb:b7:d8:07:a1:32:b4:d3:72:7b:7e:fb:40: 00:b1:4b:69:b4:e4:30:4f:14:b2:f2:f2:48:fb:bf: 97:59:16:e8:d4:b2:f6:b5:5c:61:15:ff:8f:8c:2a: 33:83:ca:5e:d5:7d:a5:20:48:a2:2a:b5:e2:89:a4: c4:c8:ab:8f:5d:af:75:c1:fa:4c:d2:d6:00:bd:94: 8a:ee:9e:0e:e3:e0:3a:e6:b7:85:b2:3d:b0:d5:7b: 7a:70:8f:bb:8e:40:e2:71:a6:43:6f:fa:53:25:e0: 0c:e4:32:1b:12:e5:d5:0a:af:7b:54:29:0d:f5:3a: 89:fc:d8:4b:50:01:14:72:a1:0f:2a:ca:f3:fe:25: 90:b8:07:9c:a4:41:51:b0:38:2f:21:0c:d1:da:66: 09:3d:b8:6a:c1:4d:da:81:19:c6:a0:89:7b:bd:15: ba:4e:2d:33:44:4f:2f:0c:ab:d0:f9:ef:30:cb:1b: 07:cb:c3:19:49:52:a4:df:58:cb:66:55:2e:39:43: 18:93:fe:f6:b3:a0:5f:56:4e:d7:1a:84:62:78:a6: a0:9d:ce:d7:00:b9:37:2e:f1:99:25:40:66:7a:45: 5c:0b:e3:7e:5d:4e:07:95:ac:49:8f:a1:69:93:f4: fc:5b:81:c0:de:4a:33:4f:e3:03:84:25:45:5b:c2: 0b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:75:76:E4:02:76:C3:A0:C2:5E:FD:B8:B7:2B:1A:8D:06:3A:4C:3B X509v3 Authority Key Identifier: keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f2:06:90:de:44:f1:cf:69:cc:86:98:74:ee:d6:75:25:d4: b6:ee:a0:ab:c6:19:7a:9f:d2:63:ef:0a:a4:fd:c8:87:d7:bb: e8:8f:4a:da:ab:28:8d:26:c1:02:c8:ec:ff:a3:14:9b:78:46: 49:68:d5:bd:a4:15:30:92:d8:14:1a:58:7a:83:94:3d:ae:fe: ec:b9:93:82:f3:b0:fd:38:d1:cc:32:03:c9:7b:d7:9f:88:f0: 8e:3a:27:6f:a6:ff:05:3f:57:9c:f6:42:2a:98:bd:bb:03:ec: 46:01:62:76:9a:54:7e:1d:df:8e:cb:3b:81:d2:29:a8:1a:9b: 71:d2:a0:a1:57:e0:df:1d:24:d5:56:71:a6:22:3f:84:13:54: 6c:a4:a6:63:6b:b6:ec:0a:55:b9:9a:91:e7:30:07:d3:3c:2b: 3d:be:08:3b:35:2a:e2:24:81:da:ec:03:fd:5a:5c:2d:ce:a9: 83:52:22:29:56:d8:16:f5:9f:d3:7d:17:cd:05:60:da:c5:dd: 95:ba:3d:19:39:b4:36:b2:78:24:2c:31:45:3e:91:ec:04:a1: a1:f5:f4:fe:b6:34:d7:a3:2e:28:03:09:d3:3e:9c:7c:23:b0: 75:09:4f:80:80:d9:c0:53:33:58:d5:d1:94:e9:b9:4c:88:21: 6e:0a:92:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVOVqOto4+SaYcGnIrDnwuMzJvnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQw M0FCMzIyMjAeFw0yNTEwMTgxNTA2MjFaFw0yNTEwMjEyMDE5MjFaMDMxMTAvBgNV BAMTKDI5NzU3NkU0MDI3NkMzQTBDMjVFRkRCOEI3MkIxQThEMDYzQTRDM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAy7fYB6EytNNye377QACxS2m0 5DBPFLLy8kj7v5dZFujUsva1XGEV/4+MKjODyl7VfaUgSKIqteKJpMTIq49dr3XB +kzS1gC9lIrung7j4Drmt4WyPbDVe3pwj7uOQOJxpkNv+lMl4AzkMhsS5dUKr3tU KQ31Oon82EtQARRyoQ8qyvP+JZC4B5ykQVGwOC8hDNHaZgk9uGrBTdqBGcagiXu9 FbpOLTNETy8Mq9D57zDLGwfLwxlJUqTfWMtmVS45QxiT/vazoF9WTtcahGJ4pqCd ztcAuTcu8ZklQGZ6RVwL435dTgeVrEmPoWmT9PxbgcDeSjNP4wOEJUVbwgtfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKXV25AJ2w6DCXv24tysajQY6TDswHwYDVR0j BBgwFoAUadNBNkvDRLTtazplAxqstAOrMiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdhNmJjYi05ZWI2LTQ5ZGUtYjk5OC0wYmVkM2M1YzEyNzgvMC82OUQzNDEzNjRC QzM0NEI0RUQ2QjNBNjUwMzFBQUNCNDAzQUIzMjIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQwM0FC MzIyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFD QjQwM0FCMzIyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnyBpDeRPHPacyGmHTu1nUl1LbuoKvGGXqf 0mPvCqT9yIfXu+iPStqrKI0mwQLI7P+jFJt4Rklo1b2kFTCS2BQaWHqDlD2u/uy5 k4LzsP040cwyA8l715+I8I46J2+m/wU/V5z2QiqYvbsD7EYBYnaaVH4d347LO4HS Kagam3HSoKFX4N8dJNVWcaYiP4QTVGykpmNrtuwKVbmakecwB9M8Kz2+CDs1KuIk gdrsA/1aXC3OqYNSIilW2Bb1n9N9F80FYNrF3ZW6PRk5tDayeCQsMUU+kewEoaH1 9P62NNejLigDCdM+nHwjsHUJT4CA2cBTM1jV0ZTpuUyIIW4Kku8= -----END CERTIFICATE-----Generated at Mon Oct 20 10:17:55 2025 by rpki-client